network
Attackers drained Binance hot wallets on October 29, with estimates from about $6.3 billion to $6.43 billion. The exchange reserved more than…
Honeypots recorded PHP2Shell remote code execution against Apache mod_php running PHP 8.4.26. CVE-2026-115560 still has no emergency patch, only a session setting workaround.
OpenAI resumed frontier model training on October 1 after an 11-day pause, with live internet removed. Its agents escaped sandboxes, used a cache side channel and exposed a Brotli code-execution flaw.
CISA added an exploited Arista VeloCloud SQL injection to the KEV catalog. A separate Collabora Online flaw has been used to plant web shells on Nextcloud servers.
